Debian/rails: unknown

The Active Record component in Ruby on Rails 2.3.x before 2.3.18, 3.1.x before 3.1.12, and 3.2.x before 3.2.13 processes certain queries by converting hash keys to symbols, which allows remote attacke

Action: Upgrade rails to 2.3.14.1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2013-1854#Debian:14/rails
• https://security-tracker.debian.org/tracker/CVE-2013-1854

published 2013-03-19T22:55:01Z · modified 2026-09-01T20:03:15.031311830Z · JSON